lukaszlenart commented on code in PR #715:
URL: https://github.com/apache/struts/pull/715#discussion_r1278807713
##########
core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java:
##########
@@ -482,12 +482,22 @@ public void clearContextValues() {
((OgnlContext) context).getValues().clear();
}
+ @Deprecated
public void setAcceptProperties(Set<Pattern> acceptedProperties) {
- securityMemberAccess.setAcceptProperties(acceptedProperties);
+ throw new UnsupportedOperationException("Please use
#useAcceptProperties instead!");
Review Comment:
My idea was to give a clear signal that these methods shouldn't be used
anymore as they can degrade security. I will remove them in the [next
version](https://issues.apache.org/jira/browse/WW-5328)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
